cutil 0.1.0

A complete internal PKI toolkit for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

use cutil::ca::CertificateAuthority;
use cutil::cert::CertificateBuilder;
use cutil::types::{CertSigAlgo, DistinguishedName};

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Creating a Root CA...");

    let ca_subject = DistinguishedName::new("Example Root CA")
        .with_organization("Example Organization")
        .with_organizational_unit("IT Security")
        .with_country("US")
        .with_state("California")
        .with_locality("San Francisco");

    let mut ca = CertificateAuthority::new_root(ca_subject, CertSigAlgo::EcdsaP256, 3650)?;

    ca.save_pem("example-ca.pem", "example-ca-key.pem")?;
    println!("Root CA created and saved!");

    println!("\nIssuing a server certificate...");

    let server_cert = CertificateBuilder::server("example.com")
        .with_dns_san("example.com")
        .with_dns_san("www.example.com")
        .with_dns_san("api.example.com")
        .with_validity_days(365)
        .issue(&mut ca)?;

    server_cert.save_pem("server.pem", "server-key.pem")?;
    server_cert.save_chain("server-chain.pem")?;
    println!("Server certificate issued!");

    println!("\nIssuing a client certificate...");

    let client_cert = CertificateBuilder::client("Alice Smith")
        .with_email_san("alice@example.com")
        .with_validity_days(365)
        .issue(&mut ca)?;

    client_cert.save_pem("client.pem", "client-key.pem")?;
    println!("Client certificate issued!");

    println!("\nExporting client certificate as PKCS#12...");
    let p12_data = client_cert.export_pkcs12("password123", "Alice Smith")?;
    std::fs::write("client.p12", p12_data)?;
    println!("Client certificate exported as PKCS#12!");

    println!("\nAll certificates created successfully!");
    println!("Files created:");
    println!("  - example-ca.pem (Root CA certificate)");
    println!("  - example-ca-key.pem (Root CA private key)");
    println!("  - server.pem (Server certificate)");
    println!("  - server-key.pem (Server private key)");
    println!("  - server-chain.pem (Server certificate chain)");
    println!("  - client.pem (Client certificate)");
    println!("  - client-key.pem (Client private key)");
    println!("  - client.p12 (Client PKCS#12 bundle)");

    Ok(())
}